From 20a3767e5fa3b0f8742970a1b6a7a3dec6f0850b Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Mon, 20 Feb 2023 01:03:18 +0000 Subject: [PATCH] fix: requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-SETUPTOOLS-3180412 - https://snyk.io/vuln/SNYK-PYTHON-WAITRESS-2428349 - https://snyk.io/vuln/SNYK-PYTHON-WAITRESS-40552 - https://snyk.io/vuln/SNYK-PYTHON-WAITRESS-40566 - https://snyk.io/vuln/SNYK-PYTHON-WAITRESS-538573 - https://snyk.io/vuln/SNYK-PYTHON-WAITRESS-538575 - https://snyk.io/vuln/SNYK-PYTHON-WAITRESS-539932 - https://snyk.io/vuln/SNYK-PYTHON-WAITRESS-543054 - https://snyk.io/vuln/SNYK-PYTHON-WAITRESS-564339 - https://snyk.io/vuln/SNYK-PYTHON-WEBOB-40490 --- requirements.txt | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/requirements.txt b/requirements.txt index 559b98dc..cb5329c5 100644 --- a/requirements.txt +++ b/requirements.txt @@ -6,7 +6,7 @@ PasteDeploy==1.5.2 PyYAML==3.11 Pygments==2.0.2 Sphinx==1.3.1 -WebOb==1.4.1 +WebOb==1.6.0a0 WebTest==2.0.18 beautifulsoup4==4.3.2 boto==2.31.1 @@ -32,7 +32,7 @@ pytz==2014.10 repoze.lru==0.6 requests==2.7.0 schematics==1.1.0 -setuptools==7.0 +setuptools==65.5.1 sh==1.11 simplejson==3.6.5 six==1.9.0 @@ -40,7 +40,7 @@ sphinxcontrib-httpdomain==1.4.0 translationstring==1.3 tzlocal==1.1.2 venusian==1.0 -waitress==0.8.9 +waitress==2.1.1 zope.deprecation==4.1.1 zope.interface==4.1.1 git+https://github.com/openprocurement/barbecue.git